AWS Lake Formation access control models - AWS Glue
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

AWS Lake Formation access control models

AWS Glue 5.0 and above supports two models for accessing data through AWS Lake Formation:

The following table describes summary of how to choose between Fine-grained access control (FGAC) and Full table access (FTA) for your workload.

Feature Fine-grained access control (FGAC) Full table access (FTA)
Access Level Column/row level Full table
Use Case Queries and ETL with limited permissions ETL
Performance Impact Requires system/user space transitions for access control evaluation, adding latency Optimized performance